CVE-2023-6619: SourceCodester Simple Student Attendance System class_form.php sql injection

Published Dec 8, 2023

Updated

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /modals/classform.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-247256.

Affected Software

1 affected component

oretnom23 Simple Student Attendance System=1.0

Event History

Dec 8, 2023

CVE Published

05:31 PM

Data Sourced

05:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-6619?

CVE-2023-6619 has been rated as critical due to its potential for SQL injection.

What functionality is affected by CVE-2023-6619?

CVE-2023-6619 affects the /modals/class_form.php file in the Simple Student Attendance System 1.0.

How does the CVE-2023-6619 vulnerability occur?

The CVE-2023-6619 vulnerability occurs through manipulation of the argument 'id' which leads to SQL injection.

How can I secure against CVE-2023-6619?

To secure against CVE-2023-6619, you should validate and sanitize all inputs in the affected functionalities.

Is there a patch available for CVE-2023-6619?

As of now, there is no specific patch mentioned for CVE-2023-6619, so it's advisable to implement input validation immediately.